$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434824d9-2fdf-3385-94a7-b5c7bae2fba1.roa File: 434824d9-2fdf-3385-94a7-b5c7bae2fba1.roa (raw, json) Hash identifier: zIgGk8zUOoYjwG2DFqizFxLjdFH2dbZbh4z+AjFxKJ0= Subject key identifier: 18:29:F1:F9:59:B0:AB:DD:B5:F2:C6:52:15:C7:66:2D:7B:95:A2:24 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E769A221C7E7ED6F4E64980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434824d9-2fdf-3385-94a7-b5c7bae2fba1.roa Signing time: Thu 19 Jun 2025 14:39:51 +0000 ROA not before: Thu 19 Jun 2025 14:39:51 +0000 ROA not after: Wed 17 Sep 2025 14:39:51 +0000 asID: 22773 IP address blocks: 72.210.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:9a:22:1c:7e:7e:d6:f4:e6:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:51 2025 GMT Not After : Sep 17 14:39:51 2025 GMT Subject: CN=8a6b5447-f56b-42c0-bcd2-486add103557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:cb:ee:d2:c1:83:72:55:d0:53:e6:0c:46: 74:b6:77:1f:2f:92:04:13:d7:d3:34:64:c3:1f:e0: bf:16:7a:04:f1:9e:e4:31:78:0f:78:85:b6:d8:f4: 68:02:0f:63:37:1b:b2:ce:7f:1a:10:79:43:29:ce: b3:76:0e:d7:70:2b:08:59:61:1b:8e:69:c7:a6:8a: e6:f3:4e:ac:94:de:47:e1:49:62:d1:35:5d:e4:c3: 1d:1d:06:9e:5e:66:7e:33:9a:5f:44:a3:ae:8c:15: 40:93:8d:94:32:86:47:ae:62:d7:44:ed:00:60:92: e5:29:7f:f6:81:2b:2d:85:1e:11:3d:e4:48:2c:55: c8:9e:98:fd:f8:ab:01:b8:b2:24:30:48:18:b5:ea: 19:1a:17:03:59:40:42:a5:e2:d4:9c:36:ed:45:b4: 25:e6:d6:e3:22:77:ad:c0:ed:4d:7e:1f:f0:73:26: 61:5c:88:4d:f4:d8:eb:1b:25:91:e3:37:e3:65:0a: 8e:e1:fa:6f:05:21:d7:88:6a:b5:0e:59:af:48:fa: c7:3a:75:a7:26:27:73:e9:93:d8:9b:90:b4:de:47: e4:3d:db:57:a8:1b:ad:9a:aa:34:1a:8e:f6:f0:7e: 1c:23:bc:2d:9d:04:6f:09:5b:62:82:e1:e7:d9:6c: 79:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:29:F1:F9:59:B0:AB:DD:B5:F2:C6:52:15:C7:66:2D:7B:95:A2:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434824d9-2fdf-3385-94a7-b5c7bae2fba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.210.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:41:5a:09:fa:8a:8a:36:9e:e5:39:e7:8b:54:2f:7b:10:e6: 47:52:91:6f:d6:7b:56:20:83:ba:62:20:68:7b:9d:f6:b3:a8: 76:a0:40:48:37:7f:7c:d3:d5:d1:07:a7:14:6b:00:c1:a3:7d: 56:b2:7f:ae:6f:7b:0e:7e:a7:b1:f4:97:0f:f6:18:45:cb:db: ba:66:2e:36:da:85:cd:db:4d:aa:83:1d:6d:e1:fc:42:f1:e3: 4f:8d:e8:80:eb:64:5a:75:74:62:6b:7e:ab:28:f5:0a:a1:79: 8e:1a:e3:20:bc:b1:e3:4e:4a:82:cf:5f:b9:ca:ff:fe:ab:52: 93:9b:62:a3:fb:c4:2c:7f:01:0c:1c:32:3c:e0:a7:9f:b9:fa: fa:b7:91:ac:9d:4c:e4:da:2e:85:d6:89:83:67:2d:c7:04:a7: 7b:97:aa:4c:5b:6b:f2:6e:c1:36:45:f6:c8:47:f7:ad:5f:a6: a3:92:b7:2a:3b:5f:40:00:48:eb:ba:58:13:29:0d:e8:23:e5: d7:ee:5e:38:20:be:d7:11:c9:01:86:c8:a9:3b:db:75:ef:3a: 63:15:88:3e:95:31:2e:92:6d:84:96:97:a6:14:6b:70:37:cb: a6:d9:69:9d:a4:e9:f3:39:54:42:5b:bb:9d:49:e5:9d:39:43: a5:98:11:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dpoiHH5+1vTmSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0Mzk1MVoXDTI1MDkxNzE0Mzk1MVowLzEtMCsGA1UEAxMk OGE2YjU0NDctZjU2Yi00MmMwLWJjZDItNDg2YWRkMTAzNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8fL7tLBg3JV0FPmDEZ0tncfL5IEE9fTNGTD H+C/FnoE8Z7kMXgPeIW22PRoAg9jNxuyzn8aEHlDKc6zdg7XcCsIWWEbjmnHporm 806slN5H4Uli0TVd5MMdHQaeXmZ+M5pfRKOujBVAk42UMoZHrmLXRO0AYJLlKX/2 gSsthR4RPeRILFXInpj9+KsBuLIkMEgYteoZGhcDWUBCpeLUnDbtRbQl5tbjInet wO1Nfh/wcyZhXIhN9NjrGyWR4zfjZQqO4fpvBSHXiGq1DlmvSPrHOnWnJidz6ZPY m5C03kfkPdtXqButmqo0Go728H4cI7wtnQRvCVtiguHn2Wx5zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgp8flZsKvdtfLGUhXHZi17laIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM0ODI0ZDktMmZkZi0z Mzg1LTk0YTctYjVjN2JhZTJmYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVBWgn6ioo2nuU554tUL3sQ5kdSkW/We1Ygg7piIGh7nfazqHagQEg3 f3zT1dEHpxRrAMGjfVayf65vew5+p7H0lw/2GEXL27pmLjbahc3bTaqDHW3h/ELx 40+N6IDrZFp1dGJrfqso9QqheY4a4yC8seNOSoLPX7nK//6rUpObYqP7xCx/AQwc Mjzgp5+5+vq3kaydTOTaLoXWiYNnLccEp3uXqkxba/JuwTZF9shH961fpqOStyo7 X0AASOu6WBMpDegj5dfuXjggvtcRyQGGyKk723XvOmMViD6VMS6SbYSWl6YUa3A3 y6bZaZ2k6fM5VEJbu51J5Z05Q6WYEU4= -----END CERTIFICATE-----Generated at Tue Jul 1 16:44:06 2025 by rpki-client